Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1aa38486-cd53-4f48-891d-a0191edf04a1.roa
File: 1aa38486-cd53-4f48-891d-a0191edf04a1.roa (raw, json)
Hash identifier: kiEcW4NfaZF6ycj1/RyJvjPqOz885xZRvONiywWVB4s=
Subject key identifier: A7:C6:0A:83:E7:6F:3B:9B:B8:69:D8:DB:8B:5C:C5:1B:17:F6:23:87
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B1048635C37C9BB8DEDCE1FB94E3C4358960DFA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1aa38486-cd53-4f48-891d-a0191edf04a1.roa
Signing time: Fri 07 Aug 2026 04:51:04 +0000
ROA not before: Fri 07 Aug 2026 04:51:04 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:10:48:63:5c:37:c9:bb:8d:ed:ce:1f:b9:4e:3c:43:58:96:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:51:04 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=cc5551e96e4ecc96af58fd3db016d44a7242a153638acd17ddb0823aa058c374, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:4b:18:e3:e1:1f:69:8e:1e:46:e9:3f:78:
a8:62:6c:a6:76:d2:b2:ab:99:35:8d:34:86:88:6f:
df:77:64:64:29:b6:0b:d9:ce:68:cc:68:59:7a:d0:
a6:21:95:30:c3:e3:ac:c8:df:a9:ca:2f:97:f4:fa:
a9:f4:15:c3:1f:21:8b:56:95:03:04:02:d0:41:b2:
2d:16:a4:eb:aa:63:78:98:95:56:33:31:21:ac:36:
50:d6:eb:fb:bd:b4:1e:f5:44:93:cf:67:f4:03:b7:
ad:1e:18:eb:67:6b:bc:0e:0e:af:28:da:d1:26:08:
ec:83:f4:eb:ff:cc:41:c2:4b:40:d4:25:16:cf:4a:
7c:98:a0:0f:1e:a8:cd:42:0b:b8:9e:c0:9a:23:ac:
01:c8:b2:8f:4e:07:d9:1a:b4:ff:d0:67:70:7c:85:
83:64:36:4f:ec:ae:12:a2:3c:2a:ae:a3:2e:8d:99:
6e:b6:f0:00:f1:82:65:17:9b:31:5f:42:49:3e:b0:
cc:83:6c:d7:58:ac:80:31:da:51:da:56:c6:67:c0:
2f:da:93:27:e6:b1:b3:9c:66:72:72:14:89:c4:54:
bf:cf:64:09:15:35:6c:20:d9:ea:77:1c:0b:d7:99:
14:18:7c:37:a3:56:b0:6a:fe:fe:f3:66:e3:5d:8b:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C6:0A:83:E7:6F:3B:9B:B8:69:D8:DB:8B:5C:C5:1B:17:F6:23:87
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1aa38486-cd53-4f48-891d-a0191edf04a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
bc:a8:52:73:52:1a:76:8d:bb:49:a1:6e:e1:d4:29:42:99:4c:
42:81:11:85:78:a5:84:37:ab:2d:d7:2c:a2:2c:76:71:b7:c7:
29:ed:70:7d:2b:b7:ac:d3:29:5e:24:ce:c3:b9:20:d6:df:e2:
57:42:6a:c9:c8:28:ff:eb:85:7a:0b:c7:66:a6:38:0e:34:7e:
84:05:06:85:91:41:e2:5b:a6:60:bc:9c:7f:eb:30:c0:d3:e9:
01:05:83:af:3c:40:ab:a0:ee:8e:e8:b9:73:2e:d5:74:fe:b5:
7a:0a:8e:5b:ab:6b:0e:c2:f8:9d:85:5f:2a:34:e9:f5:ae:4c:
82:d4:d2:1b:5d:6c:5f:51:88:b1:e8:69:b6:d0:19:c9:f0:ad:
cb:25:df:2d:7e:61:71:4e:4c:aa:63:8d:d7:6b:bb:58:88:42:
81:76:6b:b9:92:65:82:40:19:cb:8a:cc:09:c8:6f:59:84:c4:
70:bc:7f:c0:e3:b9:85:20:e0:b7:d1:2c:8e:b3:83:10:1e:0f:
91:b8:a7:0e:ad:7a:b6:38:ef:59:f6:4e:f7:a2:13:ed:1b:6d:
d7:7f:65:9a:1b:3a:a0:9e:24:dc:17:aa:e0:e3:78:cc:2c:da:
76:39:04:c8:44:3e:d4:55:7e:94:fc:79:95:b2:63:df:50:9a:
15:a8:90:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:45 2026 by rpki-client